$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft File: C7D4D30314160FDACB9582CF972E90EC10AE206F.mft (raw, json) Hash identifier: HK4UDXRaAIgxdS0I+6yMJ9L3YyN8DSn3G4F5mKr8Usw= Subject key identifier: 10:E3:29:BA:D4:1E:A3:31:A8:42:9D:80:D9:14:F6:AE:40:C3:26:16 Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F Certificate issuer: /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Certificate serial: 64256BDA5A7E7DDE4D12463D0D866857D090653F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft Manifest number: 0505 Signing time: Sat 06 Sep 2025 08:01:31 +0000 Manifest this update: Sat 06 Sep 2025 07:56:31 +0000 Manifest next update: Tue 09 Sep 2025 18:20:31 +0000 Files and hashes: 1: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: xsM8R50wRfdlN5JweHjZIfTpmduLeILF/fWliK+i37M=) 2: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=) 3: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: 4N6LRCptGvt5p5Z3fi0q5sQmHj3OTG0hHztRBZdu+t8=) 4: C7D4D30314160FDACB9582CF972E90EC10AE206F.crl (hash: hm1R5bH6eGSVCFhRxxkrTdfzTyLQnk/NXzQ5rIzz/8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:25:6b:da:5a:7e:7d:de:4d:12:46:3d:0d:86:68:57:d0:90:65:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Validity Not Before: Sep 6 07:56:31 2025 GMT Not After : Sep 9 18:20:31 2025 GMT Subject: CN=10E329BAD41EA331A8429D80D914F6AE40C32616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:20:5a:c0:b9:27:68:b7:65:c2:f1:9c:0c:11: 42:d1:f5:89:c2:2e:da:b6:57:7e:ea:25:03:74:71: 61:e2:62:5b:f6:69:28:8d:f3:14:dc:73:e6:b4:0e: dc:cc:76:ac:ba:29:36:36:ca:1a:ee:59:af:eb:fe: 38:b9:2c:af:26:32:da:31:df:cf:88:a6:a3:26:da: 3d:d3:ad:46:bf:0a:0b:0f:69:4c:6c:e0:3a:a9:24: 6e:7f:2c:be:40:65:81:e2:58:c4:56:56:6e:01:90: a0:2c:e5:95:ae:43:d5:0c:1b:0e:53:27:b6:4d:dd: d9:26:1c:46:62:f2:6c:44:e6:66:13:a2:f6:8a:10: 41:71:d4:0b:c0:f1:a3:94:3a:0b:40:0d:23:50:9e: 78:78:25:18:bc:e6:b6:16:fd:0e:3a:5e:b3:55:32: 79:19:8f:64:ff:b5:ed:de:6c:b5:84:dd:99:96:21: cf:bb:c0:11:46:96:84:68:64:f1:46:2b:62:7c:fb: 65:be:f5:c6:c1:49:08:9d:bf:ec:88:02:4b:88:0c: ba:a8:d4:a9:1e:1b:97:2d:42:97:4d:4d:9b:1f:0a: f4:65:25:39:8d:cb:78:d1:c9:8e:c9:a1:b6:97:d7: b5:41:a8:39:2d:0f:96:ec:af:3a:94:f8:35:a9:67: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E3:29:BA:D4:1E:A3:31:A8:42:9D:80:D9:14:F6:AE:40:C3:26:16 X509v3 Authority Key Identifier: keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:2d:54:b2:75:d6:7e:2a:8f:b1:74:53:c7:9f:56:33:06:6d: ea:92:17:58:1c:dd:9f:2d:4e:63:ce:15:d5:3d:e0:62:5e:d9: df:21:33:90:91:2c:ba:50:07:49:75:13:31:bc:c5:82:27:99: a8:6f:81:ed:67:19:56:78:c7:c7:8f:73:54:20:53:15:36:63: 3c:0a:47:bb:9b:01:86:78:3a:c5:b6:1b:39:93:fc:91:d8:ac: cd:13:a3:34:18:65:d2:8e:d5:04:a1:f0:bc:cd:b0:5c:7b:10: 3a:55:37:ad:1b:f0:35:f4:38:01:c1:dc:80:85:53:58:8a:6c: 58:ce:79:78:cf:d9:94:cd:85:bb:91:3a:b7:a3:b7:f8:7e:e8: dc:9a:28:db:37:f7:cd:c6:f4:77:5a:e0:b7:41:ed:09:57:b1: 5e:b0:8c:be:7b:a2:23:84:df:6a:e9:e3:e7:d1:02:34:0f:69: c4:7b:ed:35:f8:dc:8e:70:e4:1f:43:bc:e4:bc:05:b2:74:a0: a9:db:47:76:7c:bf:a5:86:83:3f:b8:07:ab:e1:40:c2:7b:5e: df:1b:62:eb:14:f9:a0:24:40:28:03:e6:21:56:a1:05:75:12: 03:78:b8:05:0c:c2:7b:fa:56:82:49:f8:f2:a6:70:6b:bd:75: 00:f7:77:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCVr2lp+fd5NEkY9DYZoV9CQZT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMx MEFFMjA2RjAeFw0yNTA5MDYwNzU2MzFaFw0yNTA5MDkxODIwMzFaMDMxMTAvBgNV BAMTKDEwRTMyOUJBRDQxRUEzMzFBODQyOUQ4MEQ5MTRGNkFFNDBDMzI2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIFrAuSdot2XC8ZwMEULR9YnC Ltq2V37qJQN0cWHiYlv2aSiN8xTcc+a0DtzMdqy6KTY2yhruWa/r/ji5LK8mMtox 38+IpqMm2j3TrUa/CgsPaUxs4DqpJG5/LL5AZYHiWMRWVm4BkKAs5ZWuQ9UMGw5T J7ZN3dkmHEZi8mxE5mYTovaKEEFx1AvA8aOUOgtADSNQnnh4JRi85rYW/Q46XrNV MnkZj2T/te3ebLWE3ZmWIc+7wBFGloRoZPFGK2J8+2W+9cbBSQidv+yIAkuIDLqo 1KkeG5ctQpdNTZsfCvRlJTmNy3jRyY7JobaX17VBqDktD5bsrzqU+DWpZ5rnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEOMputQeozGoQp2A2RT2rkDDJhYwHwYDVR0j BBgwFoAUx9TTAxQWD9rLlYLPly6Q7BCuIG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MThhZDdhNi1jOTA3LTQzNTktYWJhNS1kNTc0OGJhMTYxNzYvMC9DN0Q0RDMwMzE0 MTYwRkRBQ0I5NTgyQ0Y5NzJFOTBFQzEwQUUyMDZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMxMEFF MjA2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE4YWQ3YTYtYzkwNy00MzU5LWFi YTUtZDU3NDhiYTE2MTc2LzAvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkw RUMxMEFFMjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQtVLJ11n4qj7F0U8efVjMGbeqSF1gc3Z8t TmPOFdU94GJe2d8hM5CRLLpQB0l1EzG8xYInmahvge1nGVZ4x8ePc1QgUxU2YzwK R7ubAYZ4OsW2GzmT/JHYrM0TozQYZdKO1QSh8LzNsFx7EDpVN60b8DX0OAHB3ICF U1iKbFjOeXjP2ZTNhbuROrejt/h+6NyaKNs3983G9Hda4LdB7QlXsV6wjL57oiOE 32rp4+fRAjQPacR77TX43I5w5B9DvOS8BbJ0oKnbR3Z8v6WGgz+4B6vhQMJ7Xt8b YusU+aAkQCgD5iFWoQV1EgN4uAUMwnv6VoJJ+PKmcGu9dQD3d/U= -----END CERTIFICATE-----Generated at Sun Sep 7 15:16:50 2025 by rpki-client